Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
File:                     2dbgTePDYTvOHbKdd8ahOIrEIj0.mft (raw, json)
Hash identifier:          dPJse1RlnkSLskEs+Z4dJGl5qYAZvlxh2YoNidmz1NU=
Subject key identifier:   55:8D:67:39:38:E5:52:CB:E9:19:4D:86:D6:E3:EF:B4:35:D2:54:8A
Authority key identifier: D9:D6:E0:4D:E3:C3:61:3B:CE:1D:B2:9D:77:C6:A1:38:8A:C4:22:3D
Certificate issuer:       /CN=F36C1E88AF/serialNumber=D9D6E04DE3C3613BCE1DB29D77C6A1388AC4223D
Certificate serial:       E4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2dbgTePDYTvOHbKdd8ahOIrEIj0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
Manifest number:          E2
Signing time:             Mon 03 Jun 2024 02:27:03 +0000
Manifest this update:     Mon 03 Jun 2024 02:27:03 +0000
Manifest next update:     Wed 05 Jun 2024 02:27:03 +0000
Files and hashes:         1: 2dbgTePDYTvOHbKdd8ahOIrEIj0.crl (hash: 6xEjAMCqneiesoLH6nDB3evS2hT3ryjva3uLhpWmByQ=)
                          2: 685B804C78ED11EE808E734F4AD9E6FC.roa (hash: PzyyQGDYC32MAKShG33WiZN93vVPd2jc+pL5k2cXh5Y=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2dbgTePDYTvOHbKdd8ahOIrEIj0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C1E88AF/serialNumber=D9D6E04DE3C3613BCE1DB29D77C6A1388AC4223D
        Validity
            Not Before: Jun  3 02:27:03 2024 GMT
            Not After : Jun  5 02:27:03 2024 GMT
        Subject: CN=665d29f7-d631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:96:2f:c4:3d:9a:a3:6c:3c:40:74:d0:e0:75:
                    0f:3d:69:29:72:b6:5c:f3:aa:0d:52:07:d3:e2:aa:
                    6a:b3:77:57:88:30:f8:0f:da:d6:59:5d:72:ef:89:
                    26:5d:d2:00:a3:71:33:ea:3b:bd:14:bb:b6:06:43:
                    cc:ad:84:5c:ad:bc:15:b6:a2:1e:28:67:20:2e:85:
                    32:8e:67:5b:57:45:bb:7e:8f:f0:69:1e:1f:45:9d:
                    38:21:02:01:47:b3:8d:a2:bd:b5:bb:f8:a0:1f:12:
                    00:d0:bd:ac:1e:c3:9b:3b:c2:15:aa:2d:f4:d6:2e:
                    98:3e:bc:0d:b5:60:fb:be:bd:19:2f:e4:b6:f3:af:
                    cd:aa:1d:36:28:8d:29:af:01:0c:24:f2:6d:3e:22:
                    d9:85:de:83:31:80:d2:6f:be:b7:b2:97:9a:d3:a6:
                    8d:2d:52:b9:3a:64:14:14:63:2c:bc:2b:4d:91:42:
                    8a:d8:eb:6b:77:79:de:c8:c7:b2:fb:d0:55:4f:0e:
                    da:82:d8:dd:cd:7a:12:79:93:71:8a:3b:82:08:69:
                    13:a8:c1:30:97:4a:92:d6:cd:48:e1:6e:fc:67:cc:
                    fc:94:c8:2e:9f:e3:14:70:36:86:ff:be:da:82:b3:
                    75:f5:19:0f:18:0f:49:e5:a1:9e:0a:12:54:ca:28:
                    e0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8D:67:39:38:E5:52:CB:E9:19:4D:86:D6:E3:EF:B4:35:D2:54:8A
            X509v3 Authority Key Identifier:
                keyid:D9:D6:E0:4D:E3:C3:61:3B:CE:1D:B2:9D:77:C6:A1:38:8A:C4:22:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2dbgTePDYTvOHbKdd8ahOIrEIj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:04:ef:00:f9:0d:0d:5a:28:05:1b:9a:f8:52:a9:7e:1e:a7:
         ac:c4:d3:be:f1:94:a0:0e:7f:92:cb:25:af:55:23:82:20:ff:
         9e:be:cc:75:cb:28:b5:8c:e5:d3:c2:3e:3e:50:ae:83:0b:5b:
         c2:e1:df:5d:8e:d9:64:19:f5:0a:0b:9e:01:2a:c2:94:14:a2:
         02:33:06:4d:91:fb:ca:b0:a4:b7:13:52:5c:97:2f:fd:e6:00:
         c8:2b:3d:54:72:2b:41:20:fc:12:93:98:0b:d2:f0:4a:64:29:
         ae:a3:bd:bd:ea:b1:8c:45:79:20:c4:3a:29:26:61:04:8a:4f:
         60:20:b9:27:db:f2:39:e7:9d:11:23:7b:c9:d8:eb:16:81:a3:
         fa:06:11:60:d7:ae:eb:be:f7:e5:6c:44:84:8b:70:34:89:3b:
         bc:ef:01:7a:2d:c3:8d:7c:96:5a:68:2c:f6:bd:cb:e1:5a:1e:
         de:c1:d0:30:70:45:9b:2c:80:b9:ae:9b:d4:20:86:0f:77:99:
         52:89:e7:3d:2a:07:2d:86:78:de:19:6a:27:8b:0d:89:c9:3f:
         c6:dc:7d:fc:c3:7b:94:cb:42:66:41:91:bc:56:fa:47:b5:8a:
         8b:24:ee:f7:06:78:74:6c:fd:7e:f0:2e:26:d8:de:a3:19:ca:
         20:ce:3c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:14:52 2024 by rpki-client on console-ams.rpki-client.org